Endpoint Detection Analyst

Job Summary

To enhance security measures, the full-time remote Endpoint Detection and Threat Hunting Analyst will optimize the Falcon platform, conduct threat hunting, and generate reports using APIs while collaborating with various security tools.

Key responsibilities

• Operate and optimize the CrowdStrike Falcon platform for endpoint security and threat hunting
• Generate reports using APIs and manage integrations with SIEM and XDR tools
• Administer Endpoint Detection and Response policies, including creating IOA exclusions and managing Fusion SOAR workflows

Required qualifications

• Minimum three years of experience in incident response within an enterprise environment
• At least six years of experience managing CrowdStrike Falcon and SecureWorks as a subject matter expert
• Proficiency in programming or scripting languages such as PowerShell, Python, and Bash for automation tasks
• Experience with API integrations for telemetry and automation
• Minimum five years of experience with virtualization/VDI technologies and cloud SaaS solutions